I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)
This Linux Bug Gives Attackers Root
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
Before You Trust Another Self-Hosted App, Watch This
AI Is Hacking Everything Now...
Reinventing Web Security
The Supply Chain Attacks All Have One Thing in Common. It's GitHub.
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
A Vulnerability to Hack The World - CVE-2023-4863
Mythos unleashed on Opensource
Linux Weekly News: AI invades Kwin, Lutris & AMD drivers, SUSE could be sold
An initiative to secure the world's software | Project Glasswing
… Zero-day Microsoft vulnerabilities Security vulnerabilities that aren't actively being exploited but are already known before an update is released are also considered zero-day vulnerabilities. …
… None of these vulnerabilities are being exploited in the wild yet. In the Chrome Releases blog post, Srinivas Sista lists all the vulnerabilities that have been fixed, not just the ones discovered by external security researchers. …
X.Org Server 21.1.22 Released Due To Five New Security Vulnerabilities Written by Michael Larabel in X.Org on 14 April 2026 at 09:59 AM EDT. 62 Comments X.Org Server 21.1.22 is out today and driven by five new security vulnerabilities being disclosed for the aging codebase. …
Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy! "It abuses a logic bug in the Lin…
Security fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. SSO Login CSRF - GHSA-pfp2-jhgq-6hg5, GHSA-w6h6-8r66-hcv7 User/Organization Enumeration …
If Firefox is any indication, the new AI discovers two years' worth of vulnerabilities in a short period of time. Firefox seems to be an early adopter of this technology, but we should see a huge flux of newly discovered…
CopyFail just dropped, it's a new Linux kernel vulnerability that gives attackers root privileges. https://arstechnica.com/security/2026/04/as-the-most-severe-linux-threat-in-years-surfaces-the-world-scrambles/ Debian ha…
This is part of the dirtyfrag family, but is different enough to warrant its own CVE. https://www.bleepingcomputer.com/news/security/new-fragnesia-linux-flaw-lets-attackers-gain-root-privileges/ Known as Fragnasia and tr…
… The number of bugs in each vulnerability category is listed below: 61 Elevation of Privilege Vulnerabilities 6 Security Feature Bypass Vulnerabilities 31 Remote Code Execution Vulnerabilities 14 Information Disclosure Vulnerabilities 8 Denial of Service Vulnerabilities 13 Spoofing Vulnerabilities W… …
… Cybersecurity and Infrastructure Security Agency CISA added the CVE-2026-20182 flaw to its Known Exploited Vulnerabilities Catalog on May 14 and ordered federal agencies to secure affected devices within three days, by May 17. …
Apple Alerted to macOS Security Vulnerability Uncovered With AI Tool Thursday May 14, 2026 9:04 am PDT by Joe Rossignol Anthropic recently announced Project Glasswing , an initiative that enables tech companies like Apple to use its new frontier AI model Claude Mythos Preview to find security vulne… …
… That update fixed 29 security vulnerabilities, almost all of which were reported by external security researchers. One of the vulnerabilities CVE-2026-3913 is classified as critical, a buffer overflow in the WebML component. …
… It’s not clear exactly what AI model helped find the issue, though. “Notably, this is one of the first critical vulnerabilities discovered in closed-source binaries using AI, highlighting a shift in how these flaws are identified,” says Sagi Tzadik, a security researcher at Wiz. …
… Cybersecurity and Infrastructure Security Agency CISA added the flaw to its Known Exploited Vulnerabilities KEV Catalog and ordered Federal Civilian Executive Branch FCEB agencies to patch their systems by midnight on Wednesday, May 27, as mandated by Binding Operational Directive BOD 22-01 . …